sinfactura-types 1.6.22 → 1.6.23

package/dist/userActivity.d.ts

@@ -328,7 +328,61 @@ declare global {
         event: 'Impersonation UI Ended';
         target_store_id: string;
     }
-    type UserActivityEvent = UserLoggedInEvent | UserLoggedOutEvent | UserPasswordChangedEvent | UserSuspendedEvent | TwoFactorEnrolledEvent | TwoFactorDisabledEvent | TwoFactorResetEvent | TwoFactorRecoveryCodesGeneratedEvent | StorePaletteChangedEvent | StoreSettingsUpdatedEvent | PlanChangedEvent | InvoiceCreatedEvent | OrderCreatedEvent | OrderCancelledEvent | ProductPriceChangedEvent | CustomerCreatedEvent | CustomerEditedEvent | CashDrawerOpenedEvent | CashDrawerClosedEvent | TenantImpersonatedEvent | SecretRotatedEvent | UserCreatedEvent | UserUpdatedEvent | ProductCreatedEvent | ProductUpdatedEvent | StockIncomeCreatedEvent | CategoryCreatedEvent | CategoryUpdatedEvent | BrandCreatedEvent | BrandUpdatedEvent | SupplierCreatedEvent | SupplierUpdatedEvent | SupplierInvoiceCreatedEvent | SupplierAccountCreatedEvent | SupplierAccountUpdatedEvent | AccountCreatedEvent | AccountDeletedEvent | BasketUpdatedEvent | BasketDeletedEvent | CashDrawerMovementEvent | PaymentCreatedEvent | PaymentLinkedEvent | PaymentUnlinkedEvent | PaymentLinkageUpdatedEvent | NotificationReadEvent | LogDeletedEvent | PlanCreatedEvent | StoreMaintenanceToggledEvent | PlatformMaintenanceToggledEvent | TenantCreatedEvent | LiteralUpdatedEvent | SupportTicketCreatedEvent | SupportTicketUpdatedEvent | AuditTrailViewedEvent | ReportViewedEvent | CustomerPiiViewedEvent | CashDrawerUiOpenedEvent | CashDrawerUiClosedEvent | ExportInitiatedEvent | ImpersonationUiStartedEvent | ImpersonationUiEndedEvent;
+    interface PaymentViewedEvent extends UserActivityEventBase {
+        event: 'Payment Viewed';
+        payment_id: string;
+        source?: string;
+        linked_status?: 'linked' | 'unlinked';
+    }
+    interface InvoiceViewedEvent extends UserActivityEventBase {
+        event: 'Invoice Viewed';
+        invoice_id: string;
+        fiscal_status?: string;
+    }
+    interface CustomerDetailViewedEvent extends UserActivityEventBase {
+        event: 'Customer Detail Viewed';
+        customer_id: string;
+    }
+    interface SupplierAccountViewedEvent extends UserActivityEventBase {
+        event: 'Supplier Account Viewed';
+        supplier_id: string;
+    }
+    interface SearchPerformedEvent extends UserActivityEventBase {
+        event: 'Search Performed';
+        scope: 'customers' | 'audit' | 'suppliers' | 'invoices' | 'payments';
+        query_hash?: string;
+        result_count?: number;
+    }
+    interface ActionDeniedEvent extends UserActivityEventBase {
+        event: 'Action Denied';
+        attempted_action: string;
+        resource_type: string;
+        resource_id?: string;
+        reason: 'permission' | 'subscription' | 'maintenance';
+    }
+    interface TwoFactorChallengeShownEvent extends UserActivityEventBase {
+        event: 'Two-Factor Challenge Shown';
+        method: 'password' | 'social';
+        provider?: string;
+    }
+    interface TwoFactorCodeValidationFailedEvent extends UserActivityEventBase {
+        event: 'Two-Factor Code Validation Failed';
+        method: 'totp' | 'recovery';
+        attempt_number?: number;
+    }
+    interface TwoFactorEnrollmentStartedEvent extends UserActivityEventBase {
+        event: 'Two-Factor Enrollment Started';
+    }
+    interface TwoFactorRecoveryCodesRevealedEvent extends UserActivityEventBase {
+        event: 'Two-Factor Recovery Codes Revealed';
+        code_count: number;
+    }
+    interface TwoFactorResetInitiatedEvent extends UserActivityEventBase {
+        event: 'Two-Factor Reset Initiated';
+        target_user_id: string;
+        initiator_role: string;
+    }
+    type UserActivityEvent = UserLoggedInEvent | UserLoggedOutEvent | UserPasswordChangedEvent | UserSuspendedEvent | TwoFactorEnrolledEvent | TwoFactorDisabledEvent | TwoFactorResetEvent | TwoFactorRecoveryCodesGeneratedEvent | StorePaletteChangedEvent | StoreSettingsUpdatedEvent | PlanChangedEvent | InvoiceCreatedEvent | OrderCreatedEvent | OrderCancelledEvent | ProductPriceChangedEvent | CustomerCreatedEvent | CustomerEditedEvent | CashDrawerOpenedEvent | CashDrawerClosedEvent | TenantImpersonatedEvent | SecretRotatedEvent | UserCreatedEvent | UserUpdatedEvent | ProductCreatedEvent | ProductUpdatedEvent | StockIncomeCreatedEvent | CategoryCreatedEvent | CategoryUpdatedEvent | BrandCreatedEvent | BrandUpdatedEvent | SupplierCreatedEvent | SupplierUpdatedEvent | SupplierInvoiceCreatedEvent | SupplierAccountCreatedEvent | SupplierAccountUpdatedEvent | AccountCreatedEvent | AccountDeletedEvent | BasketUpdatedEvent | BasketDeletedEvent | CashDrawerMovementEvent | PaymentCreatedEvent | PaymentLinkedEvent | PaymentUnlinkedEvent | PaymentLinkageUpdatedEvent | NotificationReadEvent | LogDeletedEvent | PlanCreatedEvent | StoreMaintenanceToggledEvent | PlatformMaintenanceToggledEvent | TenantCreatedEvent | LiteralUpdatedEvent | SupportTicketCreatedEvent | SupportTicketUpdatedEvent | AuditTrailViewedEvent | ReportViewedEvent | CustomerPiiViewedEvent | CashDrawerUiOpenedEvent | CashDrawerUiClosedEvent | ExportInitiatedEvent | ImpersonationUiStartedEvent | ImpersonationUiEndedEvent | PaymentViewedEvent | InvoiceViewedEvent | CustomerDetailViewedEvent | SupplierAccountViewedEvent | SearchPerformedEvent | ActionDeniedEvent | TwoFactorChallengeShownEvent | TwoFactorCodeValidationFailedEvent | TwoFactorEnrollmentStartedEvent | TwoFactorRecoveryCodesRevealedEvent | TwoFactorResetInitiatedEvent;
 }
 /**
  * Canonical whitelist of UI-only `UserActivityEvent` variant names — the 8
@@ -340,5 +394,5 @@ declare global {
  * Source of truth lives here so the api whitelist can't drift from the
  * actual UI-only variant taxonomy.
  */
-export declare const UI_ONLY_USER_ACTIVITY_VARIANTS: readonly ["Audit Trail Viewed", "Report Viewed", "Customer PII Viewed", "Cash Drawer UI Opened", "Cash Drawer UI Closed", "Export Initiated", "Impersonation UI Started", "Impersonation UI Ended"];
+export declare const UI_ONLY_USER_ACTIVITY_VARIANTS: readonly ["Audit Trail Viewed", "Report Viewed", "Customer PII Viewed", "Cash Drawer UI Opened", "Cash Drawer UI Closed", "Export Initiated", "Impersonation UI Started", "Impersonation UI Ended", "Payment Viewed", "Invoice Viewed", "Customer Detail Viewed", "Supplier Account Viewed", "Search Performed", "Action Denied", "Two-Factor Challenge Shown", "Two-Factor Code Validation Failed", "Two-Factor Enrollment Started", "Two-Factor Recovery Codes Revealed", "Two-Factor Reset Initiated"];
 export type UiOnlyUserActivityVariant = (typeof UI_ONLY_USER_ACTIVITY_VARIANTS)[number];

package/dist/userActivity.js

@@ -40,4 +40,18 @@ export const UI_ONLY_USER_ACTIVITY_VARIANTS = [
     'Export Initiated',
     'Impersonation UI Started',
     'Impersonation UI Ended',
+    // Phase 4 (api#1266) — FE emits each through the ingest gate. `Action Denied`
+    // is whitelisted for the FE-gate path (pre-roundtrip maintenance/subscription/
+    // permission denials); the real BE 403 row is written server-side, not POSTed.
+    'Payment Viewed',
+    'Invoice Viewed',
+    'Customer Detail Viewed',
+    'Supplier Account Viewed',
+    'Search Performed',
+    'Action Denied',
+    'Two-Factor Challenge Shown',
+    'Two-Factor Code Validation Failed',
+    'Two-Factor Enrollment Started',
+    'Two-Factor Recovery Codes Revealed',
+    'Two-Factor Reset Initiated',
 ];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sinfactura-types",
-  "version": "1.6.22",
+  "version": "1.6.23",
   "main": "dist/index.js",
   "type": "module",
   "types": "./dist/index.d.ts",